MalwareRetail & ConsumerRetailSkimmerCapture App DataCustomer Data InvolvedData ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Blue Diamond Herbs LLC
bd_8bcb302bed7e24f9 · schema v1 · pii pii-v1
Full breach record for Blue Diamond Herbs LLC →Blue Diamond Herbs LLC discovered suspicious activity on its website on September 29, 2024. By November 22, 2024, it confirmed a bad actor had embedded malicious code to intercept customer credit card data. Two Maryland residents were affected, with name, home address, and credit card numbers potentially compromised. The malicious code was removed and the website relaunched with enhanced security features. Kroll identity monitoring was offered to affected individuals.
Maryland clock✗ MD AG >90d20 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376126.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 19, 2026
- Raw hash
- 360f5cdb2178d9bd9619449be294f0535be124d2e81461f469df120d09f16be8
Reporting entity
- Name
- Blue Diamond Herbs LLCnorm: blue diamond herbs
Victim entity
- Name
- Blue Diamond Herbs LLCnorm: blue diamond herbs
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Sep 29, 2024
- Materiality determined
- Nov 22, 2024
- Notification sent
- Jan 7, 2025
- Affected individuals
- 2
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1056 Input CaptureT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Maryland Office of the Attorney General, Security Breach Notification
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 months(597 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.